Do not raise `HttpResponseForbidden` in `views.vote`

`HttpResponseForbidden` is not exception, it cannot be raised, it must be returned as response.